docs: surface secrets verify in troubleshooting, refresh test counts (v0.5.0.0)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Brian Majewski 2026-06-07 15:31:30 -07:00
parent d170fb03db
commit e33bc272d2
2 changed files with 4 additions and 2 deletions

View file

@ -75,7 +75,7 @@ secrets # CLI script (~2000 lines bash)
hooks/pre-commit # Pre-commit hook template
test/
secrets.bats # bats-core test suite (133 tests)
manifest.bats # EGB-677 .secrets.json manifest tests (60 tests)
manifest.bats # EGB-677 .secrets.json manifest tests (77 tests)
test_helper.bash # Shared setup/teardown
README.md # User-facing documentation
CLAUDE.md # This file

View file

@ -493,10 +493,12 @@ For complete rotation with no historical exposure, create a fresh `~/.secrets/`
**"'jq' is not installed"** — Manifest features need `jq`. The error prints the install command for your platform. Manifest-less projects work without it.
**Not sure the store is intact?** — Run `secrets verify` in a project to check its `.secrets.json` against the store (declared-but-missing blobs and orphaned blobs) and decrypt-test every blob with your current key. Use `secrets verify --all` for a store-wide decrypt sweep across every project. It's read-only — plaintext is streamed to `/dev/null`, never written to disk — and exits non-zero if anything is wrong, so it's safe to run in CI.
## Development
```bash
# Run the test suite (193 tests across both files)
# Run the test suite (210 tests across both files)
brew install bats-core
bats test/